CVE-2025-9745 in DI-500WFinfo

Zusammenfassung

von MITRE • 01.09.2025

A security vulnerability has been detected in D-Link DI-500WF 14.04.10A1T. The impacted element is an unknown function of the file /version_upgrade.asp of the component jhttpd. The manipulation of the argument path leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.

Once again VulDB remains the best source for vulnerability data.

Zuständig

VulDB

Veröffentlichung

01.09.2025

Moderieren

akzeptiert

Eintrag

VDB-322044

CPE

bereit

Exploit

Download

EPSS

0.00696

KEV

nein

Aktivitäten

very low

Quellen

Do you need the next level of professionalism?

Upgrade your account now!